Abstract: In one embodiment, a traffic inspection service executed by an intermediary device obtains, from a monitoring agent executed by an endpoint device, keying information for an encrypted traffic session between the endpoint device and a remote entity. The traffic inspection service provides a notification to the monitoring agent that acknowledges receipt of the keying information. The traffic inspection service uses the keying information to decrypt encrypted traffic from the encrypted traffic session. The traffic inspection service applies a policy to the encrypted traffic session between the endpoint device and the remote entity, based on the decrypted traffic from the session.

Abstract: In one embodiment, a telemetry exporter in a network establishes a tunnel between the telemetry exporter and a traffic analysis service. The telemetry exporter obtains packet copies of a plurality of packets sent between devices via the network. The telemetry exporter forms a set of traffic telemetry data by discarding at least a portion of one or more of the packet copies, based on a filter policy. The telemetry exporter applies compression to the formed set of traffic telemetry data. The telemetry exporter sends, via the tunnel, the compressed set of traffic telemetry data to the traffic analysis service for analysis.

Abstract: A fenestration unit includes a first glass unit, a first panel frame, a second glass unit, a second panel frame, a sill flashing, and a frame. The frame includes a header, jambs, and a frame sill including a first track and a second track. The first panel frame and the first glass unit are slidable along the first track when positioned in the frame. The second panel frame and the second glass unit are slidable along the second track when positioned in the frame. The sill flashing includes a base extending under the first and second tracks and a wall extending upward from the base to inhibit moisture intrusion through the fenestration unit. The frame sill is removable from the frame without disassembling the sill flashing, the jambs, and the header.

Abstract: In one embodiment, a service receives administration traffic data in a network associated with a remote administration session in which a control device remotely administers a client device. The service analyzes the administration traffic data to determine whether any portion of the administration traffic data is resulting from an administration session involving a trusted administrator. The service flags a first portion of the administration traffic data as authorized when the first portion of the administration traffic data is determined to result from an administration session involving a trusted administrator, and a second portion of the administration traffic data is non-flagged. The service assesses the second portion of the administration traffic data using a machine learning-based traffic classifier to determine whether the second portion of the administration traffic data is malicious.

Abstract: In one embodiment, a device in a network detects an encrypted traffic flow associated with a client in the network. The device captures contextual traffic data regarding the encrypted traffic flow from one or more unencrypted packets associated with the client. The device performs a classification of the encrypted traffic flow by using the contextual traffic data as input to a machine learning-based classifier. The device generates an alert based on the classification of the encrypted traffic flow.

Abstract: Techniques and mechanisms for using passively collected network data to automatically generate a fingerprint prevalence database without the need for endpoint ground truth. The process first clusters all observations with the same fingerprint string and similar source and destination context. The process then annotates each cluster with descriptive information and uses a rule-based system to derive an informative name from that descriptive information, e.g., “winnt amp client” or “cross-platform browser”. Optionally, the learned database may be augmented by a user to clarify custom process labels. Additionally, the generated database may be used to report the inferred processes in the same way as databases generated with endpoint ground truth.

Abstract: In one embodiment, a traffic inspection service executed by an intermediary device obtains, from a monitoring agent executed by an endpoint device, keying information for an encrypted traffic session between the endpoint device and a remote entity. The traffic inspection service provides a notification to the monitoring agent that acknowledges receipt of the keying information. The traffic inspection service uses the keying information to decrypt encrypted traffic from the encrypted traffic session. The traffic inspection service applies a policy to the encrypted traffic session between the endpoint device and the remote entity, based on the decrypted traffic from the session.

Abstract: According to an embodiment, a method receives one or more messages associated with connecting a client and a first host. At least one of the messages comprises an encrypted portion indicating the first host and at least one of the messages comprises a cleartext portion indicating a second host. The method determines first and second sets of links associated with the first and second host, respectively. The first set is determined based on monitoring a result of connecting the client and the first host. The second set is determined based on observing behavior associated with connecting to the second host. The method detects domain fronting in response to determining, based on comparing the first set of links and the second set of links, that the first host differs from the second host.

Abstract: A system and method for determining a lowest purchase method and/or combination of purchase methods for purchasing one or more medical products, such as prescription drugs, and/or medical services, such as medical, dental, or veterinary procedures, wherein a lowest out-of-pocket expense to a user is determined based on various pricing variables, insurance reimbursement variables, and available discount programs obtained in-part from third-party data providers and third-party aggregators.

Abstract: A system and method for determining a lowest payment method and/or combination of payment methods for purchasing one or more drug prescriptions wherein a lowest out-of-pocket expense to a patient is determined based on various pricing and reimbursement variables.

Abstract: A fenestration unit includes a first glass unit, a first panel frame, a second glass unit, a second panel frame, a sill flashing, and a frame. The frame includes a header, jambs, and a frame sill including a first track and a second track. The first panel frame and the first glass unit are slidable along the first track when positioned in the frame. The second panel frame and the second glass unit are slidable along the second track when positioned in the frame. The sill flashing includes a base extending under the first and second tracks and a wall extending upward from the base to inhibit moisture intrusion through the fenestration unit. The frame sill is removable from the frame without disassembling the sill flashing, the jambs, and the header.

Abstract: A method for promoting prescription medication, comprising: receiving, by an electronic prescribing application, a request for information regarding a medication from a healthcare provider; retrieving information for a given medication which satisfies the request, where the retrieved information includes an indicia of a financial incentive associated with the given medication; presenting the given medication, along with the indicia, on a display; receiving an indication that the given medication is to be prescribed to a patient by the healthcare provider; requesting information regarding the financial incentive from a server; receiving the information regarding the financial incentive from the server; presenting the information regarding the financial incentive on the display; and sending a prescription for the given medication electronically to a pharmacy, where the prescription includes a portion of the information regarding the financial incentive.

Abstract: A system is provided which provides functionality for doctors and staff to remotely electronically download a “virtual sample cabinet” software program from a central server onto their desktop computers or mobile technology devices to allow them to centrally search, review product information and insurance coverage, print or electronically send prescription drug sample vouchers and co-pay savings coupons to selected pharmacies. This eliminates the need for physician offices to manage and house physical drug samples, as well as offers a more convenient and efficient way to allocate, dispense and monitor needed drug samples and coupons for savings to their patients. Additionally, the system helps patients to enroll into further savings on refills for their on-going medications through automatically scheduled coupons that are emailed (or mailed) to the patients thereby promoting more affordable compliance to their prescribed therapies.

Abstract: A method is provided which provides functionality for doctors and staff to remotely electronically download a “virtual sample cabinet” software program from a central server onto their desktop computers or mobile technology devices to allow them to centrally search, review product information and insurance coverage, print or electronically send prescription drug sample vouchers and co-pay savings coupons to selected pharmacies. This eliminates the need for physician offices to manage and house physical drug samples, as well as offers a more convenient and efficient way to allocate, dispense and monitor needed drug samples and coupons for savings to their patients. Additionally, the method helps patients to enroll into further savings on refills for their on-going medications through automatically scheduled coupons that are emailed (or mailed) to the patients thereby promoting more affordable compliance to their prescribed therapies.

Abstract: An interface appliance is configured to deliver a flow of fluid to the airway of a subject. The generation of the flow of fluid may be controlled to provide a therapeutic benefit to the subject. The interface appliance is configured to carry one or more sensors (24) configured to detect one or more parameters related to the flow of fluid on the subject. The one or more parameters may then be used to control the generation and/or delivery of the flow of fluid.

Abstract: A method is provided which provides functionality for doctors and staff to remotely electronically download a “virtual sample cabinet” software program from a central server onto their desktop computers or mobile technology devices to allow them to centrally search, review product information and insurance coverage, print or electronically send prescription drug sample vouchers and co-pay savings coupons to selected pharmacies. This eliminates the need for physician offices to manage and house physical drug samples, as well as offers a more convenient and efficient way to allocate, dispense and monitor needed drug samples and coupons for savings to their patients. Additionally, the method helps patients to enroll into further savings on refills for their on-going medications through automatically scheduled coupons that are emailed (or mailed) to the patients thereby promoting more affordable compliance to their prescribed therapies.

Abstract: A vehicle seat assembly includes a seat backframe and a foam cushion positioned adjacent the backframe. A trim cover is secured over the foam cushion and includes first and second edge portions sewn together along a seam. A side airbag module is secured to the backframe for airbag deployment through the seam. An airbag guide chute is secured to the side airbag module and includes first and second end portions secured to the first and second edge portions, respectively, of the trim cover. The chute is sufficiently flexible and strong to guide the deploying airbag through the seam, thereby preventing fragmentation of the foam and destruction of the trim cover material.

Abstract: An armrest storage assembly (20) disposed for use with a vehicle seat assembly (22) includes a lower tray (28) and a top closure member (30) generally referred to as substrates (28,30). Each substrate (28,30) includes an upper periphery forming a U-shaped channel (46). A fabric material (20) is wrapped about the substrate (28,30) having an edge (52) disposed within the U-shaped channel (46). The armrest assembly (20) further includes a U-shaped retainer ring (54) for interlocking disposition in the channel (46). The retainer ring (54) includes gripping members (72) for gripping the material (20) as the retainer ring (54) is forcibly inserted in the channel (46) and for retaining the material (20) in the U-shaped channel (46).